VU#556600: Space Coast Credit Union SCCU Mobile for Android and iPhone fails to properly validate SSL certificates

Vulnerability Note VU#556600 Space Coast Credit Union SCCU Mobile for Android and iPhone fails to properly validate SSL certificates Original Release date: 04 May 2017 | Last revised: 04 May 2017 Overview Space Coast Credit Union SCCU Mobile for Android, version 2.1.0.1104 and earlier, and for iOS, version 2.2 and earlier, fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks. Description CWE-295: Improper Certificate Validation – CVE-2017-3212 SCCU Mobile…